Snort mailing list archives

RE: looks false-positive


From: "Ronneil Camara" <ronneilc () remingtonltd com>
Date: Thu, 11 Apr 2002 09:29:31 -0500

Hi David,

Don't worry about it, I actually modified the name-id@ prior to posting it on the list.

Thanks anyways.

-----Original Message-----
From: David Bianco [mailto:bianco () jlab org]
Sent: Thursday, April 11, 2002 8:52 AM
To: Ronneil Camara
Cc: snort-users () lists sourceforge net
Subject: [Snort-users] looks false-positive


Ronneil Camara writes:
 > I've got an SMTP chameleon overflow. And below is the payload.
 > Looks like it's a legitimate mail.
 > 

It seems legitimate.  It might not be a good idea to post the 
contents of
people's email to a public list like this, though, especially when the
text includes email addresses.

     David

-- 
David J. Bianco, GSEC         <bianco () jlab org>
Thomas Jefferson National Accelerator Facility

     The views expressed herein are soley those of the author and
          not those of SURA/Jefferson Lab or the US DOE.


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: